Optimize More! CSS WordPress Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Optimize More! – CSS plugin for WordPress, affecting all versions through 1.0.3. The issue arises from inadequate nonce validation in the reset_plugin function, allowing unauthenticated attackers to reset the plugin's optimization settings. This can be achieved by deceiving a site administrator into clicking a link that triggers the reset.

Impact

Exploitation of this vulnerability allows for unauthorized resetting of the plugin's optimization settings, potentially disrupting the site's styling and layout management.